ObjectiveI read a lot of information, only to write this article, if there are errors, please put forward the reader in time.In general, when you use Remote Desktop to connect to Windows Server, there is always a warning prompt, 1Figure 1This warning occurs because the certificate is a self-signed certificate for the server and our client is not recognized, so I think about how to use the
-nodes-keyout rsa_private.key-x509-days 365-out cert.crt-subj "/C=CN/ST=GD/L=SZ/O=vihoo/ Ou=dev/cn=vivo.com/emailaddress=yy@vivo.com "
generating a self-signed certificate using an existing RSA private key
OpenSSL req-new-x509-days 365-key rsa_private.key-out cert.crt
-new refers to generating a certificate request, plus-x509 for direct output of the
can be generated on their own. Commercially, you typically provide your server or client certificate with a private key and certificate to request a CSR, or to pay a third-party organization to obtain a server certificate and a client certificate that is signed by the CA certifica
-signed to get the root certificate (. CRT) (CA issued to itself ).
[Plain]View Plain Copy
# Generate CA private key
Open SSL genrsa-out ca. Key 2048
# Generate CSR
OpenSSL req-New-key ca. Key-out ca. CSR
# Generate self signed certificate (CA root certificate)
A certificate in pfx format needs to be converted to the CER format at work. The original practice is to first import the pfx format certificate to the browser, and then export it from the browser, however, this is too slow for batch operations. You can use the commands provided by OpenSSL to meet this requirement.
Ope
CERTIFICATE.CRT Build your own CA (Certificate authority)# key> OpenSSL genrsa-des3-out Ca.key to generate CA4096# generate CA Certificate > OpenSSL req-new-x509-days 365-key ca.key-out ca.crt# The two steps to generate our key and CSR are the same as in the above self signed >
Model Stepping 7, Genuineintel * vs120comntools= ' C:\Program Files (x86) \microsoft Visual Studio 12.0\VC ' * Input files:c:\devpack\mingw\msys\1.0\local\win64\bin *: Libeay32.dll *: SSLEAY32.DL L * Output path:c:\devpack\workspace\temp\win64--------------------------------------------------* Make Windows Module Definition:libeay32.def * Make Windows Module import file:libeay32.libMicrosoft (R) Library Manager Version 12.00 .21005.1Copyright (C) Microsoft Corporation. All rights reserved. C
Label: style blog HTTP use AR strong data SP 2014 This error has always occurred when I recently used Ruby libraries.. When using the net/IMAP library or the net/HTTP Library (mainly using HTTPS and HTTPS using SSL), the details are as follows: Error message: e:/ruby200/lib/Ruby/2.0.0/NET/IMAP. RB: 1454: In 'connect': ssl_connect returned = 1 errno = 0 state = SSLv3 read server certificate B: Certificate
this key to enter the password, security, or there should be a password protection 4096 # using the key generated above, generate a certificate signing request (CSR) # If your key is password protected, OpenSSL will first ask for your password and then ask you a series of questions, # where common Name (CN) Is the most important, it represents your certificate t
globally.Next, we will use openssl to generate, sign, issue, and revoke certificates:
Steps:First, you have to have a certificate. First, you need to sign a certificate and use openssl to implement private CA. the CA working directory is under/etc/pki/CA, and the CA configuration file in/etc/pki/tls/
0. EnvironmentInstallation of Nginx, installation of OpenSSL1. Configuration and scriptingFirst create a demo directory (the location of their own choice, I choose to build in the Nginx directory):mkdir /etc/nginx/ca-/etc/nginx/ca-demoModify the SSL configuration openssl.cnf (also may be openssl.conf, do not know where to find with FIND-NAME/OPENSSL.CNF)Change the Dir property to your previous step self-built directory, do not use relative path , will trample pits, save,I like automation, so I w
, unencrypted connection to the APNs Server. See the information above to show that your Mac can connect to APNs. Ctrl + C closes the connection. If you get an error message, make sure that the firewall is released for 2195.Let's connect again, this time using the SSL certificate and the private key to establish a secure connection$ openssl s_client-connect gateway.sandbox.push.apple.com:2195-cert Pushchatc
Tags: Internet browser, password input, Linux technology Solution:Use OpenSSL to convert a pfx certificate to a PRM CertificateThis is a problem encountered when making bank payment. The other bank gave the pfx certificate. From the browser.Convert to PEM.1. Open the Browser Internet option, select the content, and click the
communication package. Why? Only for useThe process of establishing a CA to issue a certificate in OpenSSL is so troublesome that I barely created a CA after being busy for a long time, and then delayed the ssldump experiment due to other issues, as a result, the following information has not been found.
What? Is there a free certificate from a well-known Ca? Co
any directory, any folder name
/home/gouxu/gx/key/ 2. Go to the newly created folder key
cd/home/gouxu/gx/key/ 3. Generate CA Private key
OpenSSL genrsa-out Ca.key 2048
Parameter description:
GENRSA: Generate RSA secret key;
The key file generated by-out Ca.key is Ca.key;
2048: Secret key length is 2048. 4. Generating a CA's certificate with the CA private key
OpenSSL
Self-built CA Based on OpenSSL and SSL certificate issuance
For details about SSL/TLS, see the SSL/TLS principles.For more information about Certificate Authority (CA) and digital certificate, see OpenSSL and SSL digital certificate
The main file types and protocols for certificates are: PEM, DER, PFX, JKS, KDB, CER, Key, CSR, CRT, CRL, OCSP, SCEP, etc.
Pem–openssl uses the PEM (privacy enhanced Mail) format to hold various information, which is the default way of storing information in OpenSSL. The PEM file in Openssl generally contains the following information: Content type: Indicates wha
OpenSSL self-built certificate SSL + Apache
I have prepared it. Well, the following is my note. For details, enter the author name: wingger.In this article, we will test the certificate on Linux9 + apache2.0.52, tomcat5.5.6, j2se1.5, and openssl0.97.The purpose of this article is to communicate. If any errors occur, please advise.Reprinted, please indica
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.